Configure a Primary and Backup WAN (for Security Firewalls in NCC only)

When you have 2 Internet connections, you can configure a primary connection and backup connection. For example, if the primary connection (WAN 1) goes offline, the Nebula Device can send its traffic through the backup connection (WAN 2). Traffic will use the primary connection (WAN 1) again when it returns online.

The Nebula Device will periodically send ‘Keepalive Packets’ through the backup connection.

This tutorial uses the ATP100 as example. To configure a primary (P2) and backup connection (P6), do the following:

1 Click +Add to create WAN Group 2.

2 Click to assign the P6 port to WAN Group 2.

3 Go to Site-wide > Configure > Firewall > Interface, and click the edit icon to set an IP address for each WAN interface.

4 Go to Site-wide > Configure > Firewall > Routing, turn on Backup interface and select wan2 as the secondary WAN.

5 Perform a traceroute to test if wan2 takes over when wan1 goes down. When both wan1 and wan2 connections are working, the destination of the network traffic is the wan1 gateway (in this example, 10.214.48.254). Disconnect the wan1 connection. Outgoing WAN traffic now goes through the wan2 interface to gateway 10.214.30.254 in this example.

6 Perform a traceroute to test if wan2 takes over when wan1 goes down. When both wan1 and wan2 connections are working, the destination of the network traffic is the wan1 gateway (in this example, 10.214.48.254). Disconnect the wan1 connection. Outgoing WAN traffic now goes through the wan2 interface to gateway 10.214.30.254 in this example.